CVE-2021-44210

OX App Suite through 7.10.5 allows XSS via NIFF Notation Interchange File Format data...

CVE-2021-44209

OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...

CVE-2021-44211

OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature...

CVE-2021-44208

OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat...

CVE-2021-44210

OX App Suite through 7.10.5 allows XSS via NIFF Notation Interchange File Format data...

CVE-2021-44210

OX App Suite through 7.10.5 allows XSS via NIFF Notation Interchange File Format data...

CVE-2021-44211

OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature...

Design/Logic Flaw

OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat...

Cross site scripting

OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...

Cross site scripting

OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature...

Format string

OX App Suite through 7.10.5 allows XSS via NIFF Notation Interchange File Format data...

CVE-2021-44213

OX App Suite 7.10.5 frontend is affected by a Cross‑Site Scripting (XSS) vulnerability (CVE-2021-44213). The issue is fixed in version 7.10.5-rev26; vulnerable version identified as 7.10.5. Public exploit details are not provided in the connected documents. The root cause specifics are not disclo...

CVE-2021-44212

OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring...

CVE-2021-44212

ox App Suite (Open-Xchange) version 7.10.5 and earlier is affected by a cross-site scripting vulnerability in the frontend, caused by a trailing control character (SCRIPT\t) that can be exploited to inject script. In CVE-2021-44212, exploitation targets users via the web interface and can lead to...

CVE-2021-44211

OX App Suite (Open-Xchange) up to version 7.10.5 is affected by a Cross-Site Scripting vulnerability in the HTML e-mail signature signature element class attribute. The issue is documented in CVE-2021-44211 and is triggered by an element’s class attribute, enabling XSS. Public writeups indicate v...

CVE-2021-44211

OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature...

CVE-2021-44210

OX App Suite through 7.10.5 allows XSS via NIFF Notation Interchange File Format data...

CVE-2021-44210

OX App Suite (Open-Xchange) up to version 7.10.5 is affected by a Cross-Site Scripting flaw in the frontend triggered via NIFF data. Publicly documented details indicate the vulnerable version is 7.10.5 with a fix in 7.10.5-rev26. Impact involves executing script in the victim’s context through N...

CVE-2021-44209

OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...

CVE-2021-44209

OX App Suite up to version 7.10.5 contains a Cross-Site Scripting (XSS) vulnerability that can be triggered via an HTML5 AUDIO element. The issue affects the frontend of OX App Suite (notably the 7.10.5 release and earlier) and is tied to insufficient escaping within the user-facing components (e...